dre1080/warden — Issue #12: Destroy user session when locking account
Author: JesseObrien
Created: 2011-10-26 06:12:52+00:00
State: open

Ideally, if an anyone locks a users account, the account should be subsequently logged out on the next request that requires a session check. I don't know how much overhead it would be but authentication tokens should be compared on each Warden::check() Upon locking it should revoke the current authentication token in the database, destroy the session immediatly, and the cookie as well.